| Table of Contents | ||||||
|---|---|---|---|---|---|---|
|
...
The full tag must have at least three levels. The first two are fixed as firewall.huawei. The third level identifies the technology type and currently it can only be ngfw. The fourth element identifies the application module identified in the event.
technology | brand | type | module |
|---|---|---|---|
firewall | huawei | ngfw | fixed and usually required |
Therefore, the valid tags include:
- firewall.huawei.ngfw
- firewall.huawei.ngfw.aaa
- firewall.huawei.ngfw.cm
- firewall.huawei.ngfw.fw-log
- firewall.huawei.ngfw.ifnet
- firewall.huawei.ngfw.ifpdt
- firewall.huawei.ngfw.info
- firewall.huawei.ngfw.module
- firewall.huawei.ngfw.mstp
- firewall.huawei.ngfw.ntp
- firewall.huawei.ngfw.sec
- firewall.huawei.ngfw.shell
- firewall.huawei.ngfw.spr
- firewall.huawei.ngfw.ssh
Huawei log format
Huawei uses a fixed syslog format that contains key fields including the module name:
| Code Block |
|---|
TimeStamp Hostname %% dd ModuleName/Severity/Brief (l): Description |
...